MS Flow - Access Token Error

Question

A user who has some Flows set up in Office 365 keeps getting the following error message:  

We have found 1 of your connections in a disconnected state. Would you like to fix them now

The error message itself is as follows:

Failed to refresh access token for service: office365certificate. Correlation Id=459ba911-xxxx-xxxx-xxxx-8206c7d2xxxx, UTC TimeStamp=7/26/2018 4:04:36 PM, Error: Failed to acquire token from AAD: AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '00000003-0000-0ff1-ce00-000000000000'.

Trace ID: a0bcff0f-9b5b-411a-984b-61fce37exxxx

Correlation ID: cc8a09ce-xxxx-xxxx-xxxx-5c1a4bfdxxxx

Timestamp: 2018-07-26 16:04:36Z

This keeps happening every few days. All other O365 products remain unaffected.

Answer 1

Hi Dave,

According to the article, the multi-factor refresh token and the multi-factor session token's max age is 365 days if the MaxAgeSessionMultiFactor is not set.

To narrow down the situation, would you please confirm whether the user is set to sign in with Multi-factor authentication? If yes, please try cancel the Multi-factor authentication and check whether the problem still persists.

Meanwhile, please provide the screenshot of the error message to us.

Regards,

Tisky

Answer 2

Message looks like their multi-factor needs to be setup or reconfigured.

See link below on how to do this.

https://docs.microsoft.com/en-us/azure/active-d...

Answer 3

Hi Dave,

Thanks for your reply, you mentioned that the error message pops up every few days, we suspect the issue is related to the token lifetimes in Azure Active Directory, you can refer to this article to know about and configure the token lifetime for the MFA: Configurable token lifetimes in Azure Active Directory .

Regards,

Tisky

Answer 4

sending this back up

Answer 5

Hi Sarah,

MFA is already enabled (and working).

This message pops up every few days (even after authenticating with the MFA device).

Thanks